Documentation changelog

v5.4.6 adds a scoped bearer developer read surface for applications, API-key metadata, audit activity, webhook subscriptions, and delivery state; every collection is owner-filtered, cursor-paginated, and metadata-only. SCIM helpers send application/scim+json, encode identifiers, require keyed mutations, and expose ETag validators. v5.4.4 adds opaque SCIM ETag/meta.version validators: If-None-Match returns 304 for unchanged individual resources, and If-Match returns a safe SCIM 412 before a stale update or deprovisioning can mutate data. v5.4.3 keeps API lifecycle explicit and makes the public Status page consume the same capability, readiness, and rehearsal evidence used by the release gate. /api/v1 responses advertise X-Lucion-API-Version: v1 and current lifecycle state, SCIM /scim/v2 responses advertise scim-2.0, and unsupported requested versions fail closed before authentication or D1 access. The published policy provides at least six months of notice before removing a supported version. v5.4.2 added the API versioning contract, maintained SDK metadata, and fail-closed negotiation. v5.4.1 completes the maintained TypeScript, Python, and Go organization inspection surface, including runtime capabilities/rehearsal, delegated administrators, policies, roles, application assignments, federation connections, and read-only provider health. v5.4.0 added complete helpers for the server-backed organization mutation surface. Every mutation helper requires a caller-supplied idempotency key, encodes tenant/resource path segments, retries only safe reads or explicitly keyed mutations, and preserves safe request metadata. v5.3.9 connects the server-backed Organization Console to the existing approval workflow with safe request, list, incremental-load, approve, and reject controls. Approval records never execute actions, create sessions, or bypass policy. v5.3.8 adds bounded opaque-cursor pagination to tenant-bound organization audit and approval reads, with stable ordering and metadata-free audit responses. v5.3.7 adds a read-only federation provider metadata preflight with safe classifications and explicit protocol status. v5.3.6 adds the public capability-evidence contract used by the Trust Center, with explicit live, gated, degraded, manual, and planned states. v5.3.5 connects the scoped delegated-administration API to the server-backed organization console, with explicit member selection, exact scope input, bounded expiry, and revoke controls. v5.3.4 added Owner-only creation, active-member targeting, bounded expiry, exact scope enforcement, revocation, audit evidence, and no session issuance. v5.3.3 extended optional organization session binding to sensitive reads as well as authorization and administrative mutation, failing closed with privacy-minimized policy-denial evidence when context changes; it does not claim hardware device attestation. v5.3.2 introduced the hash-only binding policy. v5.3.1 hardens organization approval workflows with administrator step-up, separation of duties, atomic audit evidence, and hash-only idempotency completion; approval records never execute actions. v5.3.0 adds bounded SAML 2.0 IdP metadata validation before federation activation. SAML assertion execution and external Lyra action execution remain explicitly gated.